[Snort-sigs] PCRE Rules and hexa

Brian bmc at ...95...
Fri Nov 28 15:48:06 EST 2003


On Wed, Nov 26, 2003 at 10:07:46AM +0100, Cedric Foll wrote:
> i'd like to know how can we put (and if it's possible) hexa characters
> in a pcre command.  
    
    pcre:"/\x00/";

> I'd also like to know where can I found doc about
> new keywords (like isdataat) introduced in the rules of the 2.1
> version.

There are none yet.  Soon :P

-brian




More information about the Snort-sigs mailing list